Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: v8h7bRaxR+y8lt2TlV+1ViTTuhmnX+Mpy/hNRp7n7WM=
Subject key identifier: EB:C0:36:F8:8A:59:54:51:4C:D8:D5:01:36:EE:33:D7:55:46:6E:DC
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 01A10D02AB019F3CE02F6579415DFB221491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 10A7
Signing time: Mon 05 Oct 2026 17:00:40 +0000
Manifest this update: Mon 05 Oct 2026 17:00:40 +0000
Manifest next update: Tue 06 Oct 2026 17:00:40 +0000
Files and hashes: 1: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (hash: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU=)
2: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (hash: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU=)
3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: /Fa0xlY4xkH85W2WQdBrOq9oNJiGpqpYJYYP2f9Urog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:02:ab:01:9f:3c:e0:2f:65:79:41:5d:fb:22:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Oct 5 17:00:40 2026 GMT
Not After : Oct 6 17:00:40 2026 GMT
Subject: CN=ebc036f88a5954514cd8d50136ee33d755466edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:d9:93:10:75:00:53:6a:2d:6f:00:ca:39:
26:b6:dd:e7:6d:f7:43:59:ae:2f:2b:3a:a9:2e:ed:
92:e4:70:6f:83:46:3b:86:9b:79:64:46:c3:fc:87:
1d:e6:b8:4a:e8:18:ba:90:48:64:5b:3c:af:73:a2:
18:f4:6a:1a:eb:e8:16:8f:43:08:6e:7f:02:c7:7b:
c8:01:39:4d:a0:45:01:cf:37:9f:3d:0d:05:e3:9c:
19:c2:37:d3:12:1a:d8:d7:2a:d9:9d:48:9f:9e:46:
c7:e2:1f:d6:24:06:ce:77:ef:62:3d:4c:dc:ff:a0:
7f:5b:1e:cf:97:d4:23:67:35:5d:08:b6:f4:c4:b3:
e8:a7:7f:06:dc:f9:da:2d:5a:12:fd:86:7e:11:1d:
c1:fe:d8:77:f7:35:9f:8e:a4:80:6f:e1:56:85:a8:
38:bb:a7:fc:44:03:1a:0d:c5:e6:81:02:3f:f8:00:
15:56:06:df:1e:29:c0:76:22:39:1d:3b:34:bb:4e:
8e:a6:18:21:93:ac:6a:6f:b1:d4:d2:4a:1d:03:9d:
0e:f8:57:22:8d:aa:81:8f:19:2f:c3:9a:21:5a:e1:
07:d9:92:cd:a2:78:46:e2:8b:c7:4a:b3:1c:0f:a1:
ff:a2:38:56:d0:6c:31:44:a0:b3:13:40:86:19:bd:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:36:F8:8A:59:54:51:4C:D8:D5:01:36:EE:33:D7:55:46:6E:DC
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:15:c2:62:2c:7c:b4:a3:bb:24:a9:e8:51:6f:ad:4d:d0:06:
aa:28:06:eb:10:ca:fa:35:2c:29:22:bb:2c:44:7b:8f:cd:cd:
9a:13:34:6b:5d:49:ea:d7:63:c2:0b:c0:33:e7:83:e6:69:28:
50:f6:cf:a4:d1:99:04:11:1e:08:cd:6e:2d:7a:fb:fd:89:22:
8a:eb:df:b0:5b:cd:63:d1:13:64:ac:7a:44:b1:c5:66:8a:4a:
ca:c8:0e:f6:05:9a:84:d8:22:d5:95:cc:1d:6b:fe:a9:aa:35:
d7:9a:53:bf:5b:e6:ad:75:39:b4:21:2e:fb:07:8e:c6:ac:e0:
d3:ef:8c:03:26:ab:f7:75:1a:a3:16:40:f2:c2:d7:e6:d5:4a:
60:81:ee:56:d3:6f:ae:aa:7c:e0:92:ce:f2:cc:b1:20:ff:43:
46:9a:95:e1:8b:33:9f:f7:da:6a:6e:de:83:1a:10:6c:fd:17:
5a:18:67:be:75:71:d9:55:8c:d4:37:ac:6c:3a:b3:bf:15:d2:
a1:85:c1:8b:e7:3b:90:47:1f:14:07:25:b5:1a:17:62:fa:a9:
ee:10:93:c0:49:65:56:09:2b:95:c1:35:3b:bf:81:b6:26:37:
1a:6a:33:41:6c:a2:b6:cd:3d:c4:b4:8e:79:79:1d:37:05:aa:
8c:07:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:44:50 2026 by rpki-client